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CLAIMS 

What is claimed is: 

1 . A method in a data processing system for controlling the transfer of data from 
the data processing system to a network, said method comprising the steps of: 

creating a file list of one or more data files to be controlled; 

creating a process list for each data file in the file list, wherein each process 
list identifies one or more processes executing in the data processing system that has 
accessed the data file associated with the created process list; 

receiving a request from a requesting process executing in the data processing 
system to transfer data from the data processing system to the network; 

determining if the requesting process is identified in one or more created 
process lists; and 

if the requesting process is identified in a created process list, prohibiting the 
requested transfer of data from the data processing system to the network. 

2. The method according to claim 1, wherein the step of creating a process list 
includes adding a first process to a process list when the first process receives data 
from a second process identified on the process list. 

3. The method according to claim 2, wherein the first process is only added to 
the process list when the received data is related to the process list's associated data 
file. 

4. The method according to claim 1, wherein the step of receiving includes 
receiving a request from a requesting process executing in the data processing system 



AUS920030659US1 



19 



AUS920030659US1 



20 



to transfer a data file listed in the file list from the data processing system to the 
network. 

5. The method according to claim 1, further comprising the step of requesting 
authorization to perform the requested transfer of data from the data processing 
system to the network. 

6. The method according to claim 5, wherein the step of requesting includes 
sending a message to a user of the data processing system displayed in a graphical 
user interface. 

7. The method according to claim 1, further comprising the step of performing 
the prohibited transfer of data from the data processing system to the network upon 
receipt of authorization to make the transfer of data. 

8. The method according to claim 7, wherein the authorization is a command 
received from a user of the data processing system. 
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9. A data processing system for controlling the transfer of data from a data 
processing system to a network comprising: 

means for creating a file list of one or more data files to be controlled; 

means for creating a process list for each data file in the file list, wherein each 
process list identifies one or more processes executing in the data processing system 
that has accessed the data file associated with the created process list; 

means for receiving a request from a requesting process executing in the data 
processing system to transfer data from the data processing system to the network; 

means for determining if the requesting process is identified in one or more 
created process lists; and 

means for, if the requesting process is identified in a created process list, 
prohibiting the requested transfer of data from the data processing system to the 
network. 

10. The data processing system according to claim 9, wherein the means for 
creating a process list includes adding a first process to a process list when the first 
process receives data from a second process identified on the process list. 

11. The data processing system according to claim 10, wherein the first process is 
only added to the process list when the received data is related to the process list's 
associated data file. 

12. The data processing system according to claim 9, wherein the means for 
receiving includes receiving a request from a requesting process executing in the data 
processing system to transfer a data file listed in the file list from the data processing 
system to the network. 
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13. The data processing system according to claim 9, further comprising means 
for requesting authorization to perform the requested transfer of data from the data 
processing system to the network. 

14. The data processing system according to claim 13, wherein the means for 
requesting includes sending a message to a user of the data processing system 
displayed in a graphical user interface. 

15. The data processing system according to claim 9, further comprising means 
for performing the prohibited transfer of data from the data processing system to the 
network upon receipt of authorization to make the transfer of data. 

16. The data processing system according to claim 15, wherein the authorization 
is a command received from a user of the data processing system. 
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17. An article of manufacture comprising machine-readable medium including 
program logic embedded therein that causes control circuitry in a data processing 
system for controlling the transfer of data from a data processing system to a network 
to perform the steps of: 

creating a file list of one or more data files to be controlled; 

creating a process list for each data file in the file list, wherein each process 
list identifies one or more processes executing in the data processing system that has 
accessed the data file associated with the created process list; 

receiving a request from a requesting process executing in the data processing 
system to transfer data from the data processing system to the network; 

determining if the requesting process is identified in one or more created 
process lists; and 

if the requesting process is identified in a created process list, prohibiting the 
requested transfer of data from the data processing system to the network. 

18. The article of manufacture of Claim 17, wherein the step of creating a process 
list includes adding a first process to a process list when the first process receives data 
from a second process identified on the process list. 

19. The article of manufacture of Claim 1 8, wherein the first process is only 
added to the process list when the received data is related to the process list's 
associated data file. 

20. The article of manufacture of Claim 17, wherein the step of receiving includes 
receiving a request from a requesting process executing in the data processing system 
to transfer a data file listed in the file list from the data processing system to the 
network. 
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21 . The article of manufacture of Claim 17, further comprising the step of 
requesting authorization to perform the requested transfer of data from the data 
processing system to the network. 

22. The article of manufacture of Claim 21, wherein the step of requesting 
includes sending a message to a user of the data processing system displayed in a 
graphical user interface. 

23. The article of manufacture of Claim 17, further comprising the step of 
performing the prohibited transfer of data from the data processing system to the 
network upon receipt of authorization to make the transfer of data. 

24. The article of manufacture of Claim 23, wherein the authorization is a 
command received from a user of the data processing system. 
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